
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
File: unZwbT4IgT24sndmKK-EZRjibdI.mft (raw, json)
Hash identifier: z5ngb5eegJDNNBQv6/Kd0HWn2Gei7CRh0FKMwUx2wEo=
Subject key identifier: 60:A5:4C:40:19:BA:E7:DE:84:A3:B9:06:AC:E3:CA:DA:68:E0:3A:E4
Authority key identifier: BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
Certificate issuer: /CN=ba76706d3e08813db8b2776628af846518e26dd2
Certificate serial: 01988B7D4E401153D335430F78FD80CDED1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 21:01:41 +0000
Manifest this update: Fri 08 Aug 2025 21:01:41 +0000
Manifest next update: Sat 09 Aug 2025 21:01:41 +0000
Files and hashes: 1: Do_ZNFPYd7X2-W1xZGRW00-SNss.roa (hash: Ol8hC9+K4SVNjxQKvkLbRCYT37tEnqOL0zEZ/PI9ysk=)
2: unZwbT4IgT24sndmKK-EZRjibdI.crl (hash: ZCA0UPaW9cXBW2pAHx6l8J/dTJA/QZ6u2WPWhFhckHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:4e:40:11:53:d3:35:43:0f:78:fd:80:cd:ed:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba76706d3e08813db8b2776628af846518e26dd2
Validity
Not Before: Aug 8 21:01:41 2025 GMT
Not After : Aug 9 21:01:41 2025 GMT
Subject: CN=60a54c4019bae7de84a3b906ace3cada68e03ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:83:9e:fe:18:a0:84:f7:bd:ff:72:34:72:
46:05:25:fe:38:a1:bf:c9:9d:b2:12:5e:ba:90:db:
74:54:ca:a3:93:b7:07:5d:6b:b1:32:4b:3c:9a:21:
38:38:c6:97:aa:8d:74:a2:74:5b:ab:3d:48:ea:b0:
b6:80:30:fe:1d:f5:85:78:19:97:0c:fa:00:35:ea:
47:84:16:c1:16:84:f4:c7:e3:09:88:d8:89:e7:8a:
50:41:94:ce:f9:fe:29:36:61:35:43:ba:67:b0:ce:
e7:39:bc:4d:df:ff:ab:c8:7c:ef:d9:d1:69:0f:e8:
cc:06:d1:ae:bd:37:35:70:72:fa:14:76:9c:31:d0:
27:03:24:2a:b7:12:ad:91:d0:88:17:93:f1:2c:ab:
14:49:70:15:bb:fd:d7:bb:6d:14:9d:01:a5:be:c4:
96:1b:70:08:42:b7:b7:b3:16:b5:55:e6:4f:13:0c:
7b:60:fe:d0:b4:9e:89:ac:95:83:fe:2e:e1:05:c0:
9d:c9:3b:5d:ae:f8:e6:de:07:9a:f7:cc:7a:a2:36:
77:cf:a5:d3:a0:41:c0:8e:42:a2:e4:7a:74:9a:f3:
25:c0:ad:8d:49:a7:6a:49:95:97:a2:cb:b8:09:c0:
08:89:31:79:18:9f:b6:2a:1e:7f:36:75:03:fa:b8:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A5:4C:40:19:BA:E7:DE:84:A3:B9:06:AC:E3:CA:DA:68:E0:3A:E4
X509v3 Authority Key Identifier:
keyid:BA:76:70:6D:3E:08:81:3D:B8:B2:77:66:28:AF:84:65:18:E2:6D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unZwbT4IgT24sndmKK-EZRjibdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6d4759-a05e-46bc-be58-669eed2ec7ea/1/unZwbT4IgT24sndmKK-EZRjibdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ea:62:f1:57:ea:6a:32:16:47:52:cb:2e:4e:7b:6a:2e:e7:
2f:aa:33:56:2a:41:35:4c:89:51:5e:31:60:d6:9b:c8:3a:c4:
3a:4d:d3:3e:5b:16:be:6f:8e:58:55:4a:77:89:70:dc:c5:7b:
7a:c6:bc:5c:15:03:cf:0c:e2:53:3f:60:9b:97:d6:75:85:9a:
ae:8f:77:ea:57:8b:dc:98:11:4e:e5:da:56:ec:11:4d:87:d2:
5c:bb:1a:d8:81:af:e5:ab:ed:e7:c5:88:d8:b5:8b:e9:03:be:
08:43:72:dd:36:de:55:6e:37:e0:f4:08:ed:aa:2f:58:6a:19:
bf:93:1f:e5:b5:c6:65:82:d5:5a:cf:af:89:ec:f2:d3:96:91:
c8:b4:a3:24:d0:b7:fa:cf:f4:b5:43:65:6b:56:1b:e6:27:ed:
33:8b:ca:43:ba:5c:6c:3c:5c:f8:b7:3d:a9:3d:7e:0c:77:d6:
1c:e9:d7:36:a3:46:ed:ef:15:e5:ec:3e:dd:cf:eb:da:9f:75:
1c:a3:c4:52:09:68:ff:28:fe:a4:55:ed:d5:63:46:18:e3:50:
b2:27:e6:9f:e6:33:b0:fa:c3:df:4f:de:ec:aa:25:bf:d9:bd:
1d:c5:9c:f6:c6:cf:2b:a5:08:fe:86:3b:db:29:ae:1a:53:d8:
a3:02:a7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:11 2025 by rpki-client